Cloud Security

Multiple Memory Corruption Vulnerabilities in Kaspersky Antivirus Affected Systems: Kaspersky Labs Kaspersky AntivirusDescription: Bugtraq id: 77608 Kaspersky Antivirus is a very popular anti-virus software. Kaspersky Antivirus has multiple

Hands-on implementation of code virtual machines 0x00 what is code Virtualization Virtualization actually I think it is to use a set of custom bytecode to replace the original native commands in the program, and the bytecode is interpreted and

LibreSSL Memory leakage Vulnerability (CVE-2015-5333)LibreSSL Memory leakage Vulnerability (CVE-2015-5333) Release date:Updated on:Affected Systems: LibreSSL 2.0.0-2.3.0 Description: CVE (CAN) ID: CVE-2015-5333LibreSSL is a branch of the

Shell scripts monitor MySQL services and shell scripts monitor mysqlThe main content of this article describes how to monitor whether the MySQL service is normal by using shell scripts. For more information, see The general idea is to check whether

SolarWinds lem cmc Code Execution Vulnerability (CVE-2015-7839)SolarWinds lem cmc Code Execution Vulnerability (CVE-2015-7839) Release date:Updated on:Affected Systems: SolarWinds Log & Event Manager Description: CVE (CAN) ID:

Multiple FireEye product Command Injection VulnerabilitiesMultiple FireEye product Command Injection Vulnerabilities Release date:Updated on:Affected Systems: FireEye Malware Analysis System Description: Bugtraq id: 76742FireEye is a

Android Broadcast component Permission Bypass Vulnerability Lolipop source code has been released for some days. I found that google fixed a high-risk vulnerability on Android 5.0, which can be used to send arbitrary broadcasts: it can not only send

OpenJDK insecure temporary File Processing Vulnerability (CVE-2015-3149)OpenJDK insecure temporary File Processing Vulnerability (CVE-2015-3149) Release date:Updated on:Affected Systems: OpenJDK 8OpenJDK Description: Bugtraq id: 75933CVE (CAN)

Multiple security vulnerabilities in Roundcube WebmailMultiple security vulnerabilities in Roundcube Webmail Release date:Updated on:Affected Systems: RoundCube Webmail Description: Bugtraq id: 75555RoundCube Webmail is a browser-based IMAP

RLE Nova-Wind Turbine HMI insecure credential Vulnerability (CVE-2015-3951)RLE Nova-Wind Turbine HMI insecure credential Vulnerability (CVE-2015-3951) Release date:Updated on:Affected Systems: RLE International GmbH Nova-Wind Turbine HMI

Estools assists in anti-obfuscation Javascript 0x00 Preface Javascript is a script language running on the client. Its source code is completely visible to users. But not every js developer wants their code to be directly read, such as the malware

Rogue DHCP server Intranet attack test Intranet penetration is usually Based on ARP attacks, but ARP attacks are too costly to the Intranet and are easy to detect. Today we are talking about DHCP-based attacks.DHCP-based attacks are easy to

Talking about the blue ocean strategy of Iot Security 0 × 00 Preface In the past two years, the mobile phone market has shrunk, and global chip manufacturers are no longer able to maintain their competitiveness in the mobile phone field. Iot is the

A large number of account passwords leaked by Sinochem corporation in China Launch the first shot to a normal white hat. The China Sinochem Corporation's email system is open to the Internet. It does not impose restrictions on User Login errors or

A website vulnerability in UFIDA may cause a large amount of internal information leakage (employee name/mobile phone/email, etc) RT SQL injection is detected here.  Scanned. Don't scan don't know, a scan scared  You can see a SHELL. TXT file and

Secrets: How do ad interception software make money? There is no free lunch in life. Similarly, interception software is not free, that is, blocking advertisements can also make money, how does the interception software make money to ensure that

Hacking Team attack code analysis Part 1: Flash 0day Recently, Hacking Team, a hacker company dedicated to network listening through attack techniques, was hacked and leaked GB of data containing the company's emails, documents, and attack code. 360

Youyou mailgard webmail mail system SQL injection and command execution (login required) Show_mail.php: Require_once ('.. /global. php '); // GET the parameter information $ t_get_sd = urldecode ($ _ GET ['sd']); $ _ GET ['sd'] = strlen ($ _ GET

PHP automated white-box audit technology and implementation There are only a small number of open PHP automated auditing technical materials in China. In contrast, there have been excellent automated auditing implementations in foreign countries.

Obtain Juniper Netscreen webshells in batches using Censys Censys is a new search engine used to search information about networked devices. Security Experts can use it to evaluate the security of their solutions, hackers can use it as a powerful